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Secure Access Service Edge (SASE) 


Accelerating network transformation and security modernization 


What is SASE? 


The emergence of digital and cloud initiatives has shifted the applications from centralized data centers to distributed 
locations such as the public cloud, private cloud, and Saas. In parallel, users work from their home, office, hybrid, or any 
remote location. This new traffic pattern (any-to-any) has expanded the attack surface of the legacy network architecture 


resulting in an increased cyber risk. 


Adopting a SASE architecture addresses the shift in the application access. SASE is the convergence of network and network 
security functions for any-to-any traffic with better security controls leveraging Zero Trust principles. Gartner expects that “By 
2025, at least 60% of enterprises will have explicit strategies and timelines for SASE adoption encompassing user, branch and 


edge access, up from 10% in 20201.” 


How Cloudflare enables SASE 


Cloudflare’s SASE platform, Cloudflare One, is a Zero 
Trust network-as-a-service built on a single, unified 
Internet-native network platform. It places identity-based 
security controls, firewall, WAN-as-a-Service and more 
close to users everywhere on Earth, helping them quickly 
and securely connect to any enterprise resource. 


Instead of granting full trust and access to applications 
once they’re on the corporate network, Zero Trust uses a 
proxy-based, default-deny architecture that dictates 
verifying and authorizing every request into, out of, and 
between entities on your network — ensuring that users 
can only get to applications they're explicitly allowed to 
access. 


Obstacles to SASE 


Per Gartner, one of the obstacles to SASE is global 
coverage. On average, Fortune 500 companies have a 
presence in 32 countries. Yet many SASE vendors offer 
services in a few regions and countries. Lack of global 
coverage results in inconsistent security policy enforcement 
and performance issues. 


For businesses aiming to fully unify security and network 
edge services from a single vendor, Cloudflare One provides 
services built on our 270+ city global network in 100+ 
countries and 50ms from 95% of the Internet population. 


1888 99 FLARE | enterprise@cloudflare.com | www.cloudflare.com 
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“SASE depends upon cloud-delivery, and a 
vendor's cloud footprint may prevent 
deployments in certain geographies, such as 
China, Russia and the Middle East, where 
vendors may have limited cloud presence.” 7 


Gartner 


sa. 
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Composability expedites SASE 
Depending on existing investments, customers embarking on Cloudflare One is a composable SASE platform. With our 
the SASE journey often have several vendors spanning the platform, security and networking services all live on the 
end-to-end solution. Using more than 1-2 vendors leads to an same infrastructure, and are architecturally unified at 
increased total cost of ownership, operational complexities, every level—not just in a single pane-of-glass. One control 
performance issues, and, most importantly, reduced business plane to one data plane with single-pass inspection as 
agility. Dozens of SASE vendors exist—some specialize in close to the user as possible, so there’s no added latency. 
security, others in networking—very few are experts in both. With one control plane, any network on-ramps can 


connect and secure traffic to any resource with one-time 


Consolidating hardware and point products can take years as integrations. One management interface —UI, API and CLI. 


hardware gets refreshed in 5-7 year cycles. Refreshing 
network hardware first can cause interoperability issues with 


existing security service and vice versa. To expedite SASE “Strive for not more than two vendors for all 
adoption at own pace, customers require a SASE platform that core services to minimize complexity and 

is composable. Composability enabled services are available improve performance...” ? 

on-demand, plug-n-play with each other, and interoperable Gartner 


within existing infrastructure. 


One global, comprehensive service edge 


v Zero Trust Network Access v lIdentity/Context v Threat prevention 
Cloudflare v CASB v Device profile rules v Cloud app discovery 
v Secure Web Gateway v Role-Based Access Control v SaaS acceleration 
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Why customers use Cloudflare to adopt SASE 


Deployment simplicity Network resiliency Innovation velocity 

Cloudflare delivers a uniform and Our end-to-end traffic automation Our future-proof architecture helps us 
composable platform for easy ensures reliable and scalable build and ship new security and 

setup and operations. With network connectivity with networking capabilities very quickly. 
software-only connectors and consistent protection from any Whether it’s our rapid adoption of new 
one-time integrations, our location. With Cloudflare, every Internet and security standards or 
Cloudflare on-ramps and edge edge service is built to run in every building out customer-led use cases, 
services all work together. This network location, available to every our history of technical prowess 

leads to a better experience for customer — unlike with other speaks for itself, and our foundation 
your IT practitioners and end users. security providers provides extreme optionality. 


Not ready to try it 


Start your journey to a faster, more reliable, more secure network out? a a 
more abou 
Try it now Cloudflare One 
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